Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File:                     PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier:          7cSjexf46QUhRZg6nwesoptqkRg5UYqZizghYiDh8DI=
Subject key identifier:   AD:89:86:69:D0:4B:C6:41:1C:26:7B:82:01:1C:FF:C8:5A:44:A3:5C
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer:       /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial:       019E1DFE7E6B589EA1096CC40854A5D2BF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number:          021F
Signing time:             Tue 12 May 2026 21:01:18 +0000
Manifest this update:     Tue 12 May 2026 21:01:18 +0000
Manifest next update:     Wed 13 May 2026 21:01:18 +0000
Files and hashes:         1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: 6c0cdV60GzykiC2Qm0ZWkjZiwLzB365S+i3DFqvxZ/A=)
                          2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:7e:6b:58:9e:a1:09:6c:c4:08:54:a5:d2:bf:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
        Validity
            Not Before: May 12 21:01:18 2026 GMT
            Not After : May 13 21:01:18 2026 GMT
        Subject: CN=ad898669d04bc6411c267b82011cffc85a44a35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:c6:3e:93:1c:a9:af:67:da:81:bb:43:35:
                    86:0a:e2:53:d2:17:10:b0:61:a8:1c:0d:1c:68:06:
                    fb:06:84:69:26:47:b6:58:aa:e3:c0:9d:8f:8f:ad:
                    b4:06:41:23:81:4f:a1:fa:5a:65:8e:d4:8b:1f:8e:
                    76:30:72:27:9a:53:dc:49:b7:00:58:28:ce:a7:da:
                    75:5f:72:b6:48:26:94:1a:cc:05:34:72:69:c8:36:
                    16:80:9d:05:78:af:7b:e0:d8:1b:cf:03:74:06:d2:
                    c3:30:ce:0f:36:be:92:bc:9e:50:c8:cb:48:29:ff:
                    de:f8:1a:13:3e:51:82:9a:02:b0:1d:e9:42:25:f6:
                    5c:c8:a1:43:f8:b9:7f:59:44:ee:92:6c:a6:07:7f:
                    d3:7b:6e:41:97:39:ee:7c:29:c2:bd:e2:dd:6a:88:
                    48:44:74:73:f5:f8:e1:6a:f0:dd:54:03:4b:de:1e:
                    12:f8:60:16:67:eb:59:9a:dc:72:93:11:44:f5:67:
                    2e:07:77:a8:33:e4:95:f8:38:b3:cd:1b:12:3e:1e:
                    a6:c5:d1:ff:03:b6:fd:f7:c2:e8:b3:1a:ce:a5:ae:
                    fb:12:ed:c0:cf:2e:56:7f:36:6e:9d:c3:f5:1e:ce:
                    54:79:cf:81:83:0f:4d:10:8d:8a:9d:16:6d:e9:c6:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:89:86:69:D0:4B:C6:41:1C:26:7B:82:01:1C:FF:C8:5A:44:A3:5C
            X509v3 Authority Key Identifier:
                keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b6:7f:fe:d8:7e:1c:64:87:e5:6d:14:5d:69:8e:9f:9a:e9:
         64:cb:33:d3:bd:59:c9:d8:18:ba:07:0e:6a:5a:fc:1f:dc:78:
         aa:d2:e0:7b:39:ba:89:b5:97:6f:92:bd:ad:f8:5e:73:d1:b1:
         a0:47:87:b8:8c:bf:1c:d0:b0:60:97:ab:32:f3:47:7e:bf:cd:
         0d:49:92:e9:f0:84:a6:4b:33:91:7e:e6:9e:97:36:8c:b1:79:
         20:92:86:62:dc:63:79:43:7e:92:26:50:02:e3:98:7c:1f:d8:
         3b:11:1e:e2:50:7b:c6:ac:21:2f:65:75:57:25:48:7f:e6:6d:
         c7:8f:97:0a:94:41:0c:b1:5e:5d:87:db:d4:4b:28:89:d6:c8:
         ea:7d:97:ee:45:10:59:03:41:48:63:64:57:18:e5:af:ec:33:
         08:9c:51:d9:9f:2b:13:db:74:37:fd:fd:7f:89:12:fe:4c:e0:
         f5:0c:f3:2a:c1:b3:e2:8f:df:50:60:81:65:2a:2c:92:10:14:
         54:4a:d9:35:01:8e:e7:55:20:2d:68:b1:8f:df:2f:db:bd:f3:
         16:a2:c8:d8:6e:8e:17:2a:97:a8:cf:64:20:3d:1a:eb:d3:c7:
         38:33:57:15:3a:2e:ae:64:f0:62:a7:07:2c:d7:f9:6d:9c:c3:
         c9:d7:2e:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/n5rWJ6hCWzECFSl0r88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDhiOTJlODA5NGQ3NzgwMjE3ZTMyNTRjNTk3MjBiYzJh
OTc2MzgwHhcNMjYwNTEyMjEwMTE4WhcNMjYwNTEzMjEwMTE4WjAzMTEwLwYDVQQD
EyhhZDg5ODY2OWQwNGJjNjQxMWMyNjdiODIwMTFjZmZjODVhNDRhMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw7GPpMcqa9n2oG7QzWGCuJT0hcQ
sGGoHA0caAb7BoRpJke2WKrjwJ2Pj620BkEjgU+h+lpljtSLH452MHInmlPcSbcA
WCjOp9p1X3K2SCaUGswFNHJpyDYWgJ0FeK974NgbzwN0BtLDMM4PNr6SvJ5QyMtI
Kf/e+BoTPlGCmgKwHelCJfZcyKFD+Ll/WUTukmymB3/Te25BlznufCnCveLdaohI
RHRz9fjhavDdVANL3h4S+GAWZ+tZmtxykxFE9WcuB3eoM+SV+DizzRsSPh6mxdH/
A7b998LosxrOpa77Eu3Azy5WfzZuncP1Hs5Uec+Bgw9NEI2KnRZt6cYeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2JhmnQS8ZBHCZ7ggEc/8haRKNcMB8GA1UdIwQY
MBaAFDxIuS6AlNd4AhfjJUxZcgvCqXY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQt
YjIxZTBmNGMwYzBhLzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQtYjIxZTBmNGMwYzBh
LzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7Z//th+
HGSH5W0UXWmOn5rpZMsz071ZydgYugcOalr8H9x4qtLgezm6ibWXb5K9rfhec9Gx
oEeHuIy/HNCwYJerMvNHfr/NDUmS6fCEpkszkX7mnpc2jLF5IJKGYtxjeUN+kiZQ
AuOYfB/YOxEe4lB7xqwhL2V1VyVIf+Ztx4+XCpRBDLFeXYfb1EsoidbI6n2X7kUQ
WQNBSGNkVxjlr+wzCJxR2Z8rE9t0N/39f4kS/kzg9QzzKsGz4o/fUGCBZSoskhAU
VErZNQGO51UgLWixj98v273zFqLI2G6OFyqXqM9kID0a69PHODNXFTourmTwYqcH
LNf5bZzDydcu/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 09:35:24 2026 by rpki-client